Loading...

Knowledge Center

System crash (blue screen) BugCheck 3B occurs during upgrade to VirusScan Enterprise Patch 10
Technical Articles ID:   KB90204
Last Modified:  1/26/2018

Environment

McAfee VirusScan Enterprise (VSE) Patch 10

Microsoft Windows Server 2012

For details of VSE supported environments, see KB51111.

Problem

Under a specific and rare race condition, a system crash (blue screen error) can occur during an upgrade from an earlier (older) VSE version to VSE Patch 10.

Bugcheck Analysis key details:
 
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.

Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8002a638027, Address of the instruction which caused the bugcheck
Arg3: ffffd000c94a95e0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: autochk.exe
...
STACK_TEXT:
ffffd000`c94aa010 fffff800`2a63e714 : 00000000`84c05102 ffffe000`9fb138d0 ffffe000`a09f5002 fffff800`2a660a39 : mfehidk!VOLHOOKBASE::~VOLHOOKBASE+0x57 [d:\build_668958\build\syscore\hidlink\volhook.cpp @ 8426]
ffffd000`c94aa040 fffff800`2b6d13b6 : ffffe000`a09f5060 ffffe000`a09f8a00 00000000`00000000 ffffe000`a0925098 : mfehidk!VOLHOOKBASE::`scalar deleting destructor'+0x14
ffffd000`c94aa070 fffff800`2b6cb614 : ffffe000`84c05102 03000400`02800000 03040400`0290003a ffffe000`a0925010 : mfeavfk!AVFWORK::CreateOrGetVolumeConfigUnsafe+0x46 [d:\build_746418\build\syscore\avfilt\avfconfig.cpp @ 1563]
ffffd000`c94aa0d0 fffff800`2b6cbc5c : fffff800`2a6cd8c0 ffffe000`a19dd6d0 ffffe000`a09cd658 ffffe000`a19dd6d0 : mfeavfk!AVFWORK::ResetVolume+0x154 [d:\build_746418\build\syscore\avfilt\avfwatch.cpp @ 156]
ffffd000`c94aa100 fffff800`2b6ce8c1 : ffffe000`a19dd818 ffffe000`a19dd820 00000000`00000000 00000000`1000000c : mfeavfk!AVFWORK::FileCreatePre+0x43c [d:\build_746418\build\syscore\avfilt\avfwatch.cpp @ 809]
ffffd000`c94aa260 fffff800`2a652701 : 00000000`1000000c fffff800`2a68f852 ffffe000`a09ccab8 00000000`00000000 : mfeavfk!_FileCreatePre+0x21 [d:\build_746418\build\syscore\avfilt\avfwatch.cpp @ 2605]
ffffd000`c94aa290 fffff800`2a69a1bd : 00000000`00000001 ffffe000`a19dd6d0
..
FAULT_INSTR_CODE: 751a3948
FAULTING_SOURCE_LINE: d:\build_668958\build\syscore\hidlink\volhook.cpp
FAULTING_SOURCE_FILE: d:\build_668958\build\syscore\hidlink\volhook.cpp
FAULTING_SOURCE_LINE_NUMBER: 8426
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: mfehidk!VOLHOOKBASE::~VOLHOOKBASE+57
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: mfehidk
IMAGE_NAME: mfehidk.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 58d42d23
IMAGE_VERSION: 15.6.0.1870
STACK_COMMAND: .cxr 0xffffd000c94a95e0 ; kb
BUCKET_ID_FUNC_OFFSET: 57
FAILURE_BUCKET_ID: 0x3B_mfehidk!VOLHOOKBASE::_VOLHOOKBASE
BUCKET_ID: 0x3B_mfehidk!VOLHOOKBASE::_VOLHOOKBASE
PRIMARY_PROBLEM_CLASS: 0x3B_mfehidk!VOLHOOKBASE::_VOLHOOKBASE
TARGET_TIME: 2017-11-17T22:46:14.000Z

Cause

During an upgrade of VSE, the installer replaces earlier versions of McAfee drivers with later versions. During the driver installation, a short timing issue can cause later drivers to interact with earlier drivers and lead to a system crash.

Solution

{VSE88P11.EN_US}

{VSE88PATCHES.EN_US}

Disclaimer

The content of this article originated in English. If there are differences between the English content and its translation, the English content is always the most accurate. Some of this content has been provided using Machine Translation translated by Microsoft.

Rate this document

Did this article resolve your issue?

Please provide any comments below

Languages:

This article is available in the following languages:

English United States
Japanese

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.